UnityDevice
Seems it’s exploiting vulnerabilities in some software called “Ivanti Connect Secure VPN”, so unless you’re running that, you’re safe I guess. Says in the past they used vulnerabilities in “Qlik Sense” and Adobe “Magento”. Never heard of any of those, but I guess maybe some businesses use them?
If this was done by multiple people, I’m sure the person that designed this delivery mechanism is really annoyed with the person that made the sloppy payload, since that made it all get detected right away.
People like to interpret things with a modern lense. The translation of his job title might be carpenter, and people then go “ok, what does a carpenter do nowadays - builds chairs and tables, right”. But the word being translated is more aking to “builder”, a construction carpenter, a mason, something along those lines.
Surprisingly, the inspiration for the paper came from a YouTuber who has been attempting to physically recreate the ancient mechanism.
I was just re-watching clickspring’s videos about this yesterday.
Shame he didn’t have a scandal on that stage. They would have stopped taking about it within the day.